Interactive Ideas Reseller Solution Guide Issue 2: 2011

Feature Novell: ISM a different angle, by offering a less invasive approach. Such technologies typically take periodic snapshots of identity and entitlement information held within traditional application silos. Their intention is to make visible the identity data to support the compliance requirements, initially through regular reporting of entitlements by user, department or application. However, once deployed they can be used to shift ownership of access control regulation from IT to the relevant Business areas. By providing a translation between IT language and business terminology, these solutions empower the Business to own and manage their applications through periodic reviews of user access, and the auditing and recording of review results. The more comprehensive oversight solutions also support role discovery, modelling and role re-certification in the same manner, moving role management firmly into the business arena. Not only is oversight cheaper to deploy than automation technology due to its low impact, it also typically encompasses a wider set of systems and services. Applications which have a limited user community may well prove too expensive for automation, but can still be controlled effectively through oversight. Novell Access Governance Suite is a great example of oversight technology. Its Compliance Certification Manager component provides the mining, reporting and re-certification functionality that has helped many organisations satisfy their audit requirements. Regular reviews of user entitlements, with true ownership by the Business, is typically something that most organisations struggle to achieve. By extending the oversight model to include simple or complex rules which govern entitlement combinations, organisations can also get to grips with segregation of duty constraints and effectively manage violations. The Role Lifecycle Manager component aids organisations who want to move to true roles based provisioning, by discovering and suggesting role structures. Finally the optional Access Change and Request Manager component provides yet another option for the Business to manage user access and entitlements. 3. Monitoring The third and final category is monitoring, where existing event mechanisms within the infrastructure are tapped to provide a consolidated, real time view of user activity across the entire infrastructure. Historically, Syslog servers and centralised log collection products have focused on application or device monitoring. In todays identity infused enterprise, this doesnt provide many benefits beyond simple IT cost and efficiency savings. What is needed is the capability to incorporate identity into this event monitoring, to truly understand user behaviour, and allow the monitoring solution to play an active part in enterprise policy enforcement. Extending this monitoring idea takes us into the realm of SIEM (Secure Information and Event Management). Once centralised event collection is in place, the next stage is one of continuous compliance. In other words, correlating events in real time, watching for patterns of inappropriate behaviour. Once identified, the SIEM solution should be able to remediate the issue, usually by triggering an automation solution to remove offending access rights, escalate the exception or otherwise highlight the activity. And all this needs to happen in real time for the effects to be realised. The Novell Sentinel family of solutions is a great example of monitoring technology. Novell Sentinel Log Manager, with its flexible collector infrastructure, centralises log information into a secure storage area. Its business injection capability, forensics and reporting tools allow events to be tied to user identity, and its class leading performance means it can scale with your enterprise. Novell Sentinel (either 6.1 or its Rapid Deployment option) adds a highly flexible correlation engine, real time views and deep integration with Novells automation solutions. Access Governance Suite, after certification by the Business, can be used to populate and maintain the Identity Vault. Similarly, roles and role content managed by the business within the Access Governance Suite can populate the Role Catalogue in Identity Manager, ensuring that the provisioning of roles is done using certified and up to date structures. And finally, the option is there to use the Access Request and Change Manager component to provide a flexible, business friendly interface for self service and request management, powered by Identity Managers synchronisation engine. Sentinel in the background assesses the results of provisioning and re-certification, in both the solution components and in the infrastructure services, and ensures appropriate action and re-action are seen. Bringing it all together And what about the impact of The Cloud? Well, thats a whole other article for a future issue... The result of successfully applying technologies from these three categories is a comprehensive feedback loop where automated controls are continually monitored for effectiveness, and oversight solutions provide a recurrent snapshot of the enterprise to confirm policy adherence. In Novell terms, there are several places to start, and tackling the issues of GRC from any of these approaches is totally valid. Recently however, the trend has been for customers to adopt oversight solutions first, primarily to satisfy audit requirements, but also to provide a clean basis for new or replacement identity management solutions. Identity and access information from the www.testdriveinteractiv Where do you go from here? The first place to start is to perhaps categorise what you have already, and to try and understand and leverage the individual investments and benefits of previous technology purchases. Then, identify the gaps in each category and plan your strategy to alleviate them through extension or procurement. As weve discussed, oversight may well be the best place to start. But, beware of the integration trap, and make sure the technologies really can co-exist and leverage each other. It may be wiser to seek out a fully featured and competent suite of solutions, than waste resources attempting to knit together tactical point solutions. For more details about Novells Identity, Security and Compliance solutions, please visit: http://www.novell.com/s and-security/ Meet Philip Philip Belshaw Product Manager 020 8805 2999 philipbinteractiveidea 0208 805 2999 25 Issue 2: 2011 ER RESELL UIDE NG SOLUTIO Inside Discover why more than half of all organisations have adopted Open Source Software solutions Novell Mark Oldroyd explains the meaning of the 3 magic words: Automation, Oversight & Monitoring Red Hat Takes Aim p06 Simon Williams talks about Partner commu Introduction Issue 2: 2011 RESELLER GUIDE SOLUTION Supporting our partners with: Contents 03 About Us Inside Our service & values Discover why more than half of all organisations have adopted Open Source Software solutions 04 News & Events All the latest opportunities Novell Mark Oldroyd explains th The Interactive Ideas Service Vendor Relationships: Background Interactive Ideas was founded by Mike Trup and Grahame Fernback as a distributor of CD-ROM computer software in May 1994, initially importing technical and interactive software from the US that was not available in the UK. At first, the News & Events SolarWinds Hyper9 SolarWinds sets sights on the Application Performance and Virtualization markets T he launch of SolarWinds Application Performance Monitor (APM) and the acquisition of Hyper9 significantly extends the companys ability to address the unmet needs of Systems and Virtuali News & Events Interactive Ideas Expands Get Social Linux & Open Source Solutions I nteractive Ideas expands Linux & Open Source Solutions with the addition of SEP and dedicated product manager for EnterpriseDB. Mervin Alvarez joined Interactive in April to take on the newly created EnterpriseDB prod Q&A Red Hat Williams Sets Sail In New Channel Role Simon Williams Regional Sales Manager, UK&I Channels & Distribution, Red Hat Recently appointed Regional Sales Manager of UK & I Channels & Distribution at Red Hat, we talk to Simon Williams about his expectations and aims for the future... Q. Youve www.testdriveinteractiv 0208 805 2999 7 Q&A SolarWinds SolarWinds Go Hyper Emmet Florish Channel Development Manager, EMEA, SolarWinds Q. Youve recently acquired Hyper9. For those who dont know what Hyper9 is, can you give an overview? A. Hyper9 is a simple and powerful virtualization management solution that provides unified capacity, sp Award-Winning IT Management Built By Network & Systems Engineers SolarWinds affordable, easy-to-use IT management solutions install in minutes and put the functionality you need right at your fingertips to ensure optimal health and performance. See why 97,000+, customers trust SolarWinds products to Feature Novell: Datacentre Protecting Workloads With PlateSpin Forge Rob Aherne Data Center Partner Executive, Novell Enterprises of all sizes face real risks from downtime today. Whether businesses need to deploy a recovery solution is no longer a question at all. Its not a matter of if, but when. www.testdriveinteractiv 0208 805 2999 11 Q&A Acronis Acronis Announces Backup & Recovery 11 David Blackman General Manager, Acronis Q. Youve just announced Acronis Backup & Recovery 11. Can you tell us a bit more about this? A. Acronis Backup & Recovery 11 helps organizations of all sizes address disaster recovery and data protection needs www.testdriveinteractiv 0208 805 2999 13 Feature Novell: EUC Why Managing The Endpoint Lifecycle Matters James Stewart Senior Technology Sales Specialist, Novell What is an endpoint? Simply put, its a device that attaches to your network. Although more and more users want access to networked resources from smartphones, iPads and the like I www.testdriveinteractiv 0208 805 2999 15 Q&A EnterpriseDB The Prospect Maturity Model Sean Doherty Vice President, Marketing and Business Development, EnterpriseDB Q. What is EnterpriseDBs Prospect Maturity Model? A. EnterpriseDBs Prospect Maturity Model (PMM) is a sales and marketing tool used to: 1. Understand where a prospect is relativ www.testdriveinteractiv 0208 805 2999 17 Q&A Open Source Stack Growth Figures Are Stacking Up Walli Datoo Product Manager, Open Source Software Whats driving the growth of Open Source? We talk to Walli about the Open Source Stack concept to find out... A recent Gartner survey found that 50 of companies are now using Open Source software. W Open Doors With Open Source A recent survey found more than half of organisations surveyed have adopted open-source software solutions as part of their IT strategy. Gartner, Inc. Gartner Press Release, Gartner Survey Reveals More Than Half of Respondents Have Adopted Open Source Software Solutions Q&A Open Source Stack Source development is fundementally better than a proprietary development model. Open Source software has a higher rate of innovation as it is centralised on collaboration, the users of the software become major stakeholders in determining what features are required rather than Q&A 20 Years of Linux Happy 20th Birthday Linux Michael Breeze Marketing Director, Interactive Ideas As Linux hits 20, our very own Michael Breeze from Interactive Ideas charts the remarkable impact Linux has had an modern IT... Firstly Id like to say thanks to the Linux Foundation who have kindly b Q&A Kerio Go To Kerio For SMB Matthew Thomas UK Channel Manager, Kerio Q. For those resellers who are not familiar with the Kerio range, can you elaborate on what products you sell? A. Kerios aim is to be a complete back end software solution for SMBs allowing them to connect communicate and collabo www.testdriveinteractiv 0208 805 2999 23 Feature Novell: ISM 3 Magic Words: Automation, Oversight & Monitoring Mark Oldroyd Senior Technology Sales Specialist, Novell Whether its from internal or external pressures, the problems are always the same. How can we be sure the company or even the departmental security policies are being enforce Feature Novell: ISM a different angle, by offering a less invasive approach. Such technologies typically take periodic snapshots of identity and entitlement information held within traditional application silos. Their intention is to make visible the identity data to support the compliance requireme Q&A Cryptshare Introduction To Cryptshare Mark Forrest CEO, Cryptshare Q. Youve just launched Cryptshare in the UK, why now? A. Cryptshare has been around for some time and our business has grown rapidly in Germany in the last 12 months and since we have staff in the UK it seemed like a good time to www.testdriveinteractiv 0208 805 2999 27 Q&A SEP Introduction To SEP Hubert Schweinesbein Partner Sales Director, EMEA, SEP Interactive Ideas expands Linux & Open Source Solutions with software from SEP. Hubert Schweinesbein tells us more... Q. For those who dont know who SEP are. Can you tell us what you sell? the Citrix Synergy in San Fr www.testdriveinteractiv 0208 805 2999 29 Q&A Seanodes Introduction To Seanodes Eric Bueno Managing Director, Seanodes Q. Youve recently signed a distribution agreement with Interactive Ideas, can you tell us more about Seanodes and what you do? A. Seanodes is a Software Company specialized in high performance storage solutions and inventor www.testdriveinteractiv 0208 805 2999 31 www.testdriveinteractiv 32 0208 805 2999